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AMENDMENTS IN THE CLAIMS: 



This listing of claims will replace all prior versions, and listings, of claims in the application: 



LISTING OF THE CLAIMS: 



1 . (Currently amended) A method of controlling the usage by an attached function of 
network services associated with a network system that includes the attached function, one or 
more other attached functions and network infrastructure, the method comprising the steps of: 

a. obtaining information associated with the network system; 

b. setting one or more static policies for network services usage by the attached 
function; 

c. setting one or more dynamic policies for network services usage by the attached 
function; 

d. monitoring the network system for triggers; and 

e. modifying directly by one or more devices of the network infrastructure without 
manual intervention by a network administrator the static policies, the dynamic 
policies, or both for the attached function bas e d upon the detection of one or more 
triggers. 

2. (Original) The method as claimed in Claim 1 further comprising the step of saving set and 
modified policies associated with the attached function as policy history for the attached 
function. 



3. (Original) The method as claimed in Claim 2 further comprising the step of querying 
whether a policy history exists for the attached function after obtaining the information from the 
network system. 



4. (Original) The method as claimed in Claim 2 wherein the step of saving set and modified 
policies associated with the attached function includes the step of caching some or all of the 
policy history in a network system device. 
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5. (Original) The method as claimed in Claim 4 further comprising the step of invalidating the 
cached policy history based upon the occurrence of a specified event. 

6. (Original) The method as claimed in Claim 5 wherein the specified event is selected from 
the group consisting of time, size limitations, storage limits, a policy change, or a network 
system change. 

7. (Original) The method as claimed in Claim 2 further comprising the step of evaluating 
whether the policy history includes any static policies that may be set for the attached function in 
a current session. 

8. (Original) The method as claimed in Claim 1 wherein the triggers include timeouts, attached 
function changes, network infrastructure changes, intrusion detection events, firewall events, 
administrator inputs, network service changes and network service change requests. 

9. (Original) The method as claimed in Claim 1 wherein the information includes attached 
function information, access device information, access port, number of devices per port, priority 
per port, priority per application, priority per device, application requested, exchange protocols 
available, port security, access location, and access time. 

10. (Original) The method as claimed in Claim 1 wherein the only static policy is that there are 
only dynamic policies. 

1 1 . (Currently amended) A method of controlling the usage by an attached function of 
network services associated with a network system that includes the attached function, one or 
more other attached functions and network infrastructure, the method comprising the steps of: 

a. obtaining information associated with the network system; 

b. setting one or more dynamic policies for network services usage by the attached 
function; 

c. monitoring the network system for triggers; and 
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d. modifying directly by one or more devices of the network infrastructure without 
manual intervention by a network administrator the dynamic policies for the 
attached function bas e d upon the detection of one or more triggers. 

12. (Original) The method as claimed in Claim 1 1 further comprising the step of saving set and 
modified policies associated with the attached function as policy history for the attached 
function. 

13. (Original) The method as claimed in Claim 12 further comprising the step of querying 
whether a policy history exists for the attached function after obtaining the information from the 
network system. 

14. (Original) The method as claimed in Claim 12 wherein the step of saving set and modified 
policies associated with the attached function includes the step of caching the policy history in a 
network system device. 

15. (Original) The method as claimed in Claim 14 further comprising the step of invalidating the 
cached policy history based upon the occurrence of a specified event. 

16. (Original) The method as claimed in Claim 15 wherein the specified event is selected from 
the group consisting of time, size limitations, storage limits, a policy change, or a network 
system change. 

17. (Original) The method as claimed in Claim 1 wherein the triggers include timeouts, attached 
function changes, network infrastructure changes, intrusion detection events, firewall events, 
administrator inputs, network service changes and network service change requests. 

18. (Currently amended) A system to control the usage by an attached function of network 
services associated with a network system that includes the attached function, one or more other 
attached functions and network infrastructure, the system comprising: 
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a. means, forming part of the network system, for obtaining information associated 
with the network system; and 

b. a dynamic policy function module of the network infrastructure for setting static 
and dynamic policies for the attached function, for monitoring the network system 
for triggers, and for modifying directly by one or more devices of the network 
infrastructure the static policies, the dynamic policies, or both for the attached 
function without manual intervention by a network administrator bas e d upon the 
detection of one or more triggers. 

19. (Original) The system as claimed in Claim 18 wherein the dynamic policy function module 
is a centralized module of a policy server of the network infrastructure. 

20. (Original) The system as claimed in Claim 18 further comprising means for saving set and 
modified policies history. 

21. (Original) The system as claimed in Claim 20 wherein the means for storing set and 
modified policies history forms part of the policy server of the network infrastructure. 

22. (Original) The system as claimed in Claim 20 wherein the means for storing set and 
modified policies forms part of an interconnection device of the network infrastructure. 

23. (Original) The system as claimed in Claim 18 wherein the dynamic policy function module 
is a distributed module forming portions of two or more devices of the network infrastructure. 

24. (Original) The system as claimed in Claim 23 wherein the two or more devices are selected 
from a combination of one or more servers and one or more interconnection devices or a 
combination of two or more interconnection devices. 

25. (Original) The system as claimed in Claim 20 wherein the means for saving set and modified 
policies includes means for caching the set and modified policies on a centralized network 
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device, a local network device, or a combination of a centralized network device and a local 
network device. 

26. (Original) The system as claimed in Claim 1 8 wherein the means for obtaining information 
associated with the network system includes IEEE 802. IX authentication, RADIUS 
authentication, or a combination of IEEE 802. IX authentication and RADIUS authentication of 
the attached function. 

27. (Currently amended) A system to control the usage by an attached function of network 
services of a network system that includes the attached function, one or more other attached 
functions and network infrastructure, the system comprising: 

a. means, forming part of the network system, for obtaining information associated 
with the network system; and 

b. a dynamic policy function module of the network infrastructure for setting 
dynamic policies for network services usage by the attached function, for 
monitoring the network system for triggers, and for modifying directly by one or 
more devices of the network infrastructure the dynamic policies for the attached 
function without manual intervention by a network administrator based upon the 
detection of one or more triggers. 

28. (Original) The system as claimed in Claim 27 wherein the dynamic policy function module 
is a centralized module of a policy server of the network infrastructure. 

29. (Original) The system as claimed in Claim 27 further comprising means for saving set and 
modified policies history. 

30. (Original) The system as claimed in Claim 27 wherein the dynamic policy function module 
is a distributed module forming portions of two or more network devices of the network 
infrastructure. 
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31. (Original) The system as claimed in Claim 27 further comprising means for caching set and 
modified policies history on one or more local network devices of the network infrastructure. 

32. CANCELLED 

33. CANCELLED 

34. CANCELLED 

35. CANCELLED 

36. CANCELLED 

37. CANCELLED 

38. CANCELLED 

39. CANCELLED 

40. CANCELLED 
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